| Package | Affected versions | Patched versions |
|---|---|---|
| xtrabackup | = 2.1.0= 2.1.1= 2.1.2= 2.1.3= 2.1.4≤ 2.1.5 |
Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free